ci(deps): bump the github-actions group with 3 updates (#1705)

Bumps the github-actions group with 3 updates: [actions/checkout](https://github.com/actions/checkout), [actions/cache](https://github.com/actions/cache) and [renovatebot/github-action](https://github.com/renovatebot/github-action).


Updates `actions/checkout` from 6 to 7
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v6...v7)

Updates `actions/cache` from 5 to 6
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](actions/cache@v5...v6)

Updates `renovatebot/github-action` from 46.1.16 to 46.1.17
- [Release notes](https://github.com/renovatebot/github-action/releases)
- [Changelog](https://github.com/renovatebot/github-action/blob/main/CHANGELOG.md)
- [Commits](renovatebot/github-action@v46.1.16...v46.1.17)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/cache
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: renovatebot/github-action
  dependency-version: 46.1.17
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: dependabot[bot]

.github/workflows/build-haos-test-image.yml

@@ -267,7 +267,7 @@ jobs:
       - name: Warm shared Actions cache for E2E lanes (master only)
         if: github.ref == 'refs/heads/master' && steps.e2e_cache_key.outputs.cache-key != ''
         continue-on-error: true
-        uses: actions/cache/save@v5
+        uses: actions/cache/save@v6
         with:
           path: /tmp/haos-test-image.qcow2
           key: ${{ steps.e2e_cache_key.outputs.cache-key }}

.github/workflows/e2e-tests.yml

@@ -60,7 +60,7 @@ jobs:
 
     - name: Cache HA Docker image
       id: cache-ha-image
-      uses: actions/cache@v5
+      uses: actions/cache@v6
       with:
         path: /tmp/ha-image.tar
         key: ha-image-${{ env.HA_IMAGE_GHCR }}-${{ runner.arch }}

.github/workflows/haos-e2e-inaddon-tests.yml

@@ -145,7 +145,7 @@ jobs:
 
       - name: Restore image from cache
         id: restore-cache
-        uses: actions/cache/restore@v5
+        uses: actions/cache/restore@v6
         with:
           path: /tmp/haos-test-image.qcow2
           key: ${{ steps.key.outputs.cache-key }}

.github/workflows/haos-e2e-tests.yml

@@ -143,7 +143,7 @@ jobs:
 
       - name: Restore image from cache
         id: restore-cache
-        uses: actions/cache/restore@v5
+        uses: actions/cache/restore@v6
         with:
           path: /tmp/haos-test-image.qcow2
           key: ${{ steps.key.outputs.cache-key }}
@@ -211,7 +211,7 @@ jobs:
         # doesn't save, see the block comment at the same position in
         # ``haos-e2e-inaddon-tests.yml``.
         if: steps.restore-cache.outputs.cache-hit != 'true'
-        uses: actions/cache/save@v5
+        uses: actions/cache/save@v6
         with:
           path: /tmp/haos-test-image.qcow2
           key: ${{ steps.key.outputs.cache-key }}

.github/workflows/performance-tests.yml

@@ -48,7 +48,7 @@ jobs:
 
     - name: Cache HA Docker image
       id: cache-ha-image
-      uses: actions/cache@v5
+      uses: actions/cache@v6
       with:
         path: /tmp/ha-image.tar
         key: ha-image-${{ env.HA_IMAGE_GHCR }}-${{ runner.arch }}

.github/workflows/pr.yml

@@ -267,7 +267,7 @@ jobs:
       # Node.js" was the network download, not the extract. apt-get
       # install still runs (unpack is fast); we're just skipping the
       # download leg on cache hit.
-      uses: actions/cache@v5
+      uses: actions/cache@v6
       with:
         path: /var/cache/apt/archives
         key: apt-trixie-git-nodejs-npm-v1
@@ -297,7 +297,7 @@ jobs:
       # Lockfile-keyed so a dependency bump invalidates cleanly. `npm ci`
       # is still safe to run on cache hit (it short-circuits when the
       # tree already matches the lockfile).
-      uses: actions/cache@v5
+      uses: actions/cache@v6
       with:
         path: tests/js/node_modules
         key: tests-js-node-modules-${{ hashFiles('tests/js/package-lock.json') }}
@@ -355,7 +355,7 @@ jobs:
 
     - name: Cache HA Docker image
       id: cache-ha-image
-      uses: actions/cache@v5
+      uses: actions/cache@v6
       with:
         path: /tmp/ha-image.tar
         key: ha-image-${{ env.HA_IMAGE_GHCR }}-${{ runner.arch }}

.github/workflows/renovate.yml

@@ -43,7 +43,7 @@ jobs:
           private-key: ${{ secrets.RENOVATE_APP_PRIVATE_KEY }}
 
       - name: Self-hosted Renovate
-        uses: renovatebot/github-action@v46.1.16
+        uses: renovatebot/github-action@v46.1.17
         with:
           configurationFile: renovate.json
           token: ${{ steps.app-token.outputs.token }}

.github/workflows/validate.yml

@@ -17,7 +17,7 @@ jobs:
     name: HACS
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - name: HACS validation
         uses: hacs/action@main
         with:
@@ -27,7 +27,7 @@ jobs:
     name: Hassfest
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       # Drop vendored third-party fixtures (e.g. the upstream HACS integration
       # used as an e2e fixture) so hassfest only validates integrations this repo
       # owns. Mirrors scripts/codeql_quality_gate.py's PATHS_IGNORE convention.